查看: 4646|回复: 18
收起左侧

卡吧和暴风影音有冲突 附windbg分析

[复制链接]
coolpeople
发表于 2007-9-10 17:30:33 | 显示全部楼层 |阅读模式
windbg分析。。更新后出现问题。。
  1. kd> !analyze -v
  2. *******************************************************************************
  3. * *
  4. * Bugcheck Analysis *
  5. * *
  6. *******************************************************************************

  7. KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
  8. This is a very common bugcheck. Usually the exception address pinpoints
  9. the driver/function that caused the problem. Always note this address
  10. as well as the link date of the driver/image that contains this address.
  11. Some common problems are exception code 0x80000003. This means a hard
  12. coded breakpoint or assertion was hit, but this system was booted
  13. /NODEBUG. This is not supposed to happen as developers should never have
  14. hardcoded breakpoints in retail code, but ...
  15. If this happens, make sure a debugger gets connected, and the
  16. system is booted /DEBUG. This will let us see why this breakpoint is
  17. happening.
  18. Arguments:
  19. Arg1: c0000005, The exception code that was not handled
  20. Arg2: f3e9e326, The address that the exception occurred at
  21. Arg3: f29823f0, Trap Frame
  22. Arg4: 00000000

  23. Debugging Details:
  24. ------------------


  25. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - "0x%08lx"

  26. FAULTING_IP:
  27. klif+e326
  28. f3e9e326 8b4e0c mov ecx,dword ptr [esi+0Ch]

  29. TRAP_FRAME: f29823f0 -- (.trap 0xfffffffff29823f0)
  30. ErrCode = 00000000
  31. eax=00000b50 ebx=83715870 ecx=000a0c00 edx=21080005 esi=00000083 edi=83018d7f
  32. eip=f3e9e326 esp=f2982464 ebp=8054c7aa iopl=0 nv up ei pl nz na po nc
  33. cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
  34. klif+0xe326:
  35. f3e9e326 8b4e0c mov ecx,dword ptr [esi+0Ch] ds:0023:0000008f=????????
  36. Resetting default scope

  37. CUSTOMER_CRASH_COUNT: 1

  38. DEFAULT_BUCKET_ID: DRIVER_FAULT

  39. BUGCHECK_STR: 0x8E

  40. PROCESS_NAME: mplayerc.exe

  41. LAST_CONTROL_TRANSFER: from f3e9e3a1 to f3e9e326

  42. STACK_TEXT:
  43. WARNING: Stack unwind information not available. Following frames may be wrong.
  44. f2982474 f3e9e3a1 00000030 00000b50 f3ea4e66 klif+0xe326
  45. f29824a8 804e4d77 8353d958 82c06208 82c06208 klif+0xe3a1
  46. f29824b8 8056bfec 82c62c18 00000000 00000000 nt!IopfCallDriver+0x31
  47. f29824f0 80564ff6 00c62c30 82c62c18 00000000 nt!IopDeleteFile+0x132
  48. f298250c 804e4c55 82c62c30 00000000 0000023c nt!ObpRemoveObjectRoutine+0xdf
  49. f2982530 80568543 82bdb330 e16c6798 82e91618 nt!ObfDereferenceObject+0x5f
  50. f2982548 805685ac e16c6798 82c62c30 0000023c nt!ObpCloseHandleTableEntry+0x155
  51. f2982590 805685f6 0000023c 00000000 00000000 nt!ObpCloseHandle+0x87
  52. f29825a4 f3eaca9c 0000023c f2982638 804e006b nt!NtClose+0x1d
  53. f29825bc 804ddea6 badb0d00 f2982634 f29825f0 klif+0x1ca9c
  54. f29825cc 80565425 e16c6798 0000023c 82e91618 nt!ZwClose+0x11
  55. f2982620 804ddea6 00000008 00000202 8343ee5b nt!ExMapHandleToPointerEx+0x21
  56. f29826d8 804dea28 00000008 0000005e 00000026 nt!ZwClose+0x11
  57. f29827cc 804e4d77 834ae770 82c52ea8 82ef5be8 nt!ZwQueryInformationProcess+0x11
  58. f29828bc 8056486c 83565c08 00000000 832c6160 nt!IopfCallDriver+0x31
  59. f2982944 80568c63 00000000 f2982984 00000240 nt!ObpLookupObjectName+0x56a
  60. f2982998 80572477 00000000 00000000 ef5ae400 nt!ObOpenObjectByName+0xeb
  61. f2982a14 80572546 82d51960 02000000 f2982bb8 nt!IopCreateFile+0x407
  62. f2982a70 f3f69483 82d51960 02000000 f2982bb8 nt!IoCreateFile+0x8e
  63. f2982c24 f3f702c7 82e91828 8359c2c0 f2982c58 afd!AfdBind+0x2dc
  64. f2982c34 804e4d77 8353f530 82ef5a08 806ee070 afd!AfdDispatchDeviceControl+0x53
  65. f2982c44 8056b9ab 82ef5ae4 82c38f90 82ef5a08 nt!IopfCallDriver+0x31
  66. f2982c58 8057e9f7 8353f530 82ef5a08 82c38f90 nt!IopSynchronousServiceTail+0x60
  67. f2982d00 80580bfa 0000022c 00000214 00000000 nt!IopXxxControlFile+0x611
  68. f2982d34 804e006b 0000022c 00000214 00000000 nt!NtDeviceIoControlFile+0x2a
  69. f2982d34 7c92eb94 0000022c 00000214 00000000 nt!KiFastCallEntry+0xf8
  70. 0102ea50 00000000 00000000 00000000 00000000 0x7c92eb94


  71. STACK_COMMAND: kb

  72. FOLLOWUP_IP:
  73. klif+e326
  74. f3e9e326 8b4e0c mov ecx,dword ptr [esi+0Ch]

  75. SYMBOL_STACK_INDEX: 0

  76. FOLLOWUP_NAME: MachineOwner

  77. MODULE_NAME: klif

  78. IMAGE_NAME: klif.sys

  79. DEBUG_FLR_IMAGE_TIMESTAMP: 46826975

  80. SYMBOL_NAME: klif+e326

  81. FAILURE_BUCKET_ID: 0x8E_klif+e326

  82. BUCKET_ID: 0x8E_klif+e326

  83. Followup: MachineOwner
  84. ---------
复制代码

[ 本帖最后由 wangjay1980 于 2007-9-18 22:25 编辑 ]
gwg829
头像被屏蔽
发表于 2007-9-10 17:48:11 | 显示全部楼层
嘛意思  看不懂   
xffsfy
发表于 2007-9-10 19:18:42 | 显示全部楼层
截图比分析更有说服力....至少是在这里
rogger
发表于 2007-9-10 19:52:41 | 显示全部楼层
怎么会呢?我的卡巴很好啊。。。
放弃自我
发表于 2007-9-10 20:45:55 | 显示全部楼层
不明白,完全看不明白白,暴汗中。。。。
wangjay1980
发表于 2007-9-10 22:13:16 | 显示全部楼层
版本也不说
rcbblgy
发表于 2007-9-10 22:32:11 | 显示全部楼层
我这用的好好的,没冲突啊
shk1106
发表于 2007-9-10 22:40:24 | 显示全部楼层
暴风垃圾
一直用km
qingdianlgy
头像被屏蔽
发表于 2007-9-10 22:58:09 | 显示全部楼层
暴风垃圾
没错,现在还增加广告了,一直支持KM
暴风跟KM相比差远了
cshacker
发表于 2007-9-11 10:15:18 | 显示全部楼层
这个dump分析只能说明是AVP的驱动崩溃了,在IoCallDriver里面
看不出和暴风影音有联系。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-9 02:07 , Processed in 0.144616 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表